Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
File: PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft (raw, json)
Hash identifier: n+ZMRDYNvWprFRsCqnPLhnbBCxITDbDUuA4MI5kQIsc=
Subject key identifier: A6:62:1C:82:87:33:F1:AC:CD:78:8D:14:1C:5D:54:1F:44:1F:C5:01
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial: 019FA3A99499878A591C08AA182335B12289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
Manifest number: 13DD
Signing time: Mon 27 Jul 2026 13:00:27 +0000
Manifest this update: Mon 27 Jul 2026 13:00:27 +0000
Manifest next update: Tue 28 Jul 2026 13:00:27 +0000
Files and hashes: 1: 7XPR057HTONIllGtY9NijiuY-tk.roa (hash: rKfjiDRkcr3HFT8PmmA3P0sCBQ3drFmQ5QDnLKCb/BE=)
2: PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl (hash: /StX9TSkMW8n5M20MOmwARTjJ6aikOz+sAewYbxpcVw=)
3: T4FApCxhFe83q9A7YZlC1nZYzIE.roa (hash: LjUt5usAgPWHNriSJWMg7OS8Oagi6w46/dUqLi/UEzA=)
4: Wn-ZLE8xGx2iUZq_8EgFIe3BY1M.roa (hash: SwGxPAdfidv7O5nNS+nKj4I72Qs5sJPeTh9qbwfsZWo=)
5: YuGYvjrFzLezHsgzIUZ0asWCqVk.roa (hash: aZLneGXD5YvsOe9tvMiGcrBxDYxxGmpY4vDCZwd72Z8=)
6: fLae4aR9HsO6ApeohQnbJHEsvgg.roa (hash: /b3Xi59hV2RbWadggK4I0wXvCWO8lTHkzV3V9hJ6K0Y=)
7: jccKxXf-KlBy0OODUdeGAP1Pln4.roa (hash: kXcgJH+D8EkeDblDPw+VtydCo7evj5I/OxvPnwmyUe8=)
8: r2cUyHBMaewNpNV3po9MOZwNcyU.roa (hash: SVkhtUySEPUVdVwXoSgDIclbqsQ0muf2pONZTDoO/YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:94:99:87:8a:59:1c:08:aa:18:23:35:b1:22:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
Validity
Not Before: Jul 27 13:00:27 2026 GMT
Not After : Jul 28 13:00:27 2026 GMT
Subject: CN=a6621c828733f1accd788d141c5d541f441fc501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:3f:11:4c:5e:20:60:2d:7d:14:a9:51:d8:
82:66:b9:6b:de:cc:6c:87:f2:b4:13:df:63:30:dd:
a7:81:0c:e4:eb:47:16:e5:e1:17:ac:2f:43:47:0d:
7a:0b:81:ae:d2:80:e9:c3:8e:c3:4c:8c:bb:00:2a:
cd:87:5d:1f:b9:78:b9:22:7a:34:e1:97:81:95:94:
37:45:c1:51:98:3c:2d:bd:5f:06:2c:4e:69:74:d1:
f1:a8:60:8c:16:71:67:5d:64:3f:da:33:54:e4:bc:
86:f0:31:49:5f:39:56:33:62:32:29:bf:90:7e:02:
dc:a5:d4:b7:f9:01:b3:b1:a0:68:5d:c3:ab:31:40:
33:70:9f:c6:43:98:4f:a7:7f:ea:ab:5b:e0:e3:db:
4f:d1:d7:a8:a4:a1:77:90:cf:eb:3f:64:8e:72:72:
ff:72:d2:36:50:a6:0a:54:70:cf:0e:7a:85:a2:30:
ef:73:32:80:19:08:b1:c3:03:7a:f9:2c:8d:f6:06:
1a:cc:ed:8a:74:31:92:2a:aa:c1:b5:4c:cd:bf:2b:
96:f4:47:67:ed:72:9f:15:5e:f5:00:37:98:fb:18:
84:8a:75:af:c5:93:f8:36:30:42:20:b2:68:53:67:
b2:92:94:17:df:73:1a:e6:69:28:2d:28:cd:12:ce:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:62:1C:82:87:33:F1:AC:CD:78:8D:14:1C:5D:54:1F:44:1F:C5:01
X509v3 Authority Key Identifier:
keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:db:62:50:02:45:61:0d:e9:0f:e9:b6:7e:ed:e1:7e:af:8c:
da:8b:b0:c1:c9:8c:94:f9:a5:b8:5f:6c:00:d0:0c:eb:b9:94:
6f:09:77:b6:c1:b4:fb:8d:de:7c:fa:c2:10:6a:e5:84:d1:0c:
24:bc:7f:5b:be:8c:7b:ed:2c:78:26:61:28:79:ea:8b:68:b2:
2e:1a:3f:cf:be:27:2d:cd:5a:d0:1d:7a:f8:1c:6f:a9:02:02:
16:c5:13:7d:11:e3:01:b4:64:18:33:f1:58:c8:78:09:04:32:
e0:7f:8f:84:fa:a4:eb:5d:7b:62:a8:8c:fd:0f:13:0e:f6:ae:
bf:1e:d5:fe:41:b2:c8:a7:fb:33:04:d9:15:56:70:05:eb:e7:
47:16:45:b1:fd:26:9f:58:64:90:4f:51:85:73:e2:b0:1e:3e:
13:76:01:f5:39:42:a1:cb:dc:57:6e:9c:27:7a:e2:9c:96:cc:
72:9c:89:be:70:28:bc:99:33:18:af:52:5a:59:c8:66:ef:3c:
3d:38:fb:54:5a:7c:80:7c:56:47:f7:53:68:a2:22:9a:d8:45:
11:b4:ca:af:f5:dd:b8:28:55:54:d6:63:88:21:bb:ae:fb:85:
01:bb:e0:20:cd:9a:c2:3c:97:45:6e:92:e1:55:bd:a7:5b:cb:
99:fe:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:07:40 2026 by rpki-client